Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/u6qDpYGmfoGEMACkNnGAHtcqros.roa
File: u6qDpYGmfoGEMACkNnGAHtcqros.roa (raw, json)
Hash identifier: K3BjOm+GqWtXxTkJj9qyEmHvHYh3wmQ/32PWbJp61V0=
Subject key identifier: BB:AA:83:A5:81:A6:7E:81:84:30:00:A4:36:71:80:1E:D7:2A:AE:8B
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019F46554FAF649E0E525186E57706595044
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/u6qDpYGmfoGEMACkNnGAHtcqros.roa
Signing time: Thu 09 Jul 2026 10:03:43 +0000
ROA not before: Thu 09 Jul 2026 10:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a12:880::/29 maxlen: 29
2a12:ee00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:55:4f:af:64:9e:0e:52:51:86:e5:77:06:59:50:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jul 9 10:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbaa83a581a67e81843000a43671801ed72aae8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:22:c0:cb:90:1e:ae:0b:3c:b2:f2:1a:dd:
12:d2:97:fa:0a:17:09:12:c2:15:90:34:9b:dd:1f:
a6:97:cb:93:f1:b3:4b:50:5e:91:e4:00:e5:a4:a2:
ab:63:20:7f:ed:00:42:26:2d:d3:ea:a7:41:96:55:
cc:0d:34:6f:3d:3c:8c:fa:12:4d:6a:27:77:3d:69:
e2:00:80:57:33:c2:5b:a4:7c:04:e5:c6:52:93:ca:
3d:a0:58:66:16:bc:7c:dc:12:ba:90:68:58:ac:7c:
e6:46:8e:61:04:d6:48:ea:d8:c6:21:c6:3e:e9:e3:
10:8d:ce:06:48:55:aa:ab:bf:30:8d:ac:03:39:96:
85:79:8f:b5:b6:35:03:75:7b:12:d0:b4:4a:99:11:
c3:b5:a7:18:6a:bf:66:f8:e9:47:d3:80:61:a0:1a:
c3:31:c9:a2:a9:c1:fa:e6:92:54:7f:cd:d4:32:42:
0b:0d:ee:50:de:fd:97:ef:51:91:d4:fb:72:15:9e:
7f:dd:e7:7c:2c:34:4c:1b:80:4c:14:66:a6:6f:49:
0c:47:e1:ad:d2:c2:f0:90:cc:e7:e0:05:d9:b3:5c:
8a:98:ac:8f:04:b6:11:70:d1:e3:f5:29:e7:e5:70:
85:4a:54:74:c0:a9:fd:23:68:ad:19:5d:ce:8d:be:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AA:83:A5:81:A6:7E:81:84:30:00:A4:36:71:80:1E:D7:2A:AE:8B
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/u6qDpYGmfoGEMACkNnGAHtcqros.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:880::/29
2a12:ee00::/29
Signature Algorithm: sha256WithRSAEncryption
38:8d:57:d2:d5:9a:6f:5f:ae:e0:96:4b:32:73:0a:3a:d0:83:
b2:c6:87:ec:2a:3f:53:60:76:c1:05:74:c6:a5:fe:14:77:c9:
92:c1:fe:93:76:cf:66:92:6c:d4:6c:ad:3b:8d:3c:d7:00:1d:
2a:83:4c:2a:2e:b4:be:ed:3e:14:75:9c:7f:de:55:06:b6:1f:
cc:3b:02:f1:83:ba:8a:53:17:be:7b:d8:d6:75:bc:5a:39:70:
60:11:cc:99:2f:4b:98:ba:43:e3:b1:dd:a6:42:09:83:6e:0e:
2f:9c:bb:23:55:eb:98:7f:9e:f6:e6:1d:d2:6b:52:7a:25:ba:
76:a6:0c:0d:5b:de:0c:d1:39:eb:29:fa:10:72:37:09:4f:47:
8e:99:cc:5a:6e:bb:75:32:19:ae:be:c7:19:bb:f1:d1:a2:ab:
72:21:ad:57:0a:0b:e3:31:92:4a:cb:1d:d4:73:7d:37:0b:3c:
ea:11:18:9c:02:1c:db:e9:a3:8d:59:0e:b3:b9:01:c3:53:29:
57:56:49:ab:74:14:c0:88:05:f2:ef:b0:bb:15:86:0c:87:d7:
17:9a:d3:ca:78:00:62:62:69:ef:01:8f:eb:6c:99:1a:94:4f:
99:71:37:72:1d:8b:be:49:0c:1f:61:d4:36:d1:dc:3f:85:b4:
c8:41:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:34 2026 by rpki-client